Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dfe4c092-1316-4cb9-b4c7-1733c2e8ae11.roa
File:                     dfe4c092-1316-4cb9-b4c7-1733c2e8ae11.roa (raw, json)
Hash identifier:          gde38BHV2Ifrj57lAhERFFSKVAav4E/RDXR17uoLrhg=
Subject key identifier:   B7:EC:93:FC:80:10:4D:C9:B7:27:C1:8D:0A:27:27:64:1A:46:87:89
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1EAFA3724C748D8B2CACFAAEE01336080CDEB501
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dfe4c092-1316-4cb9-b4c7-1733c2e8ae11.roa
Signing time:             Fri 13 Feb 2026 13:00:05 +0000
ROA not before:           Fri 13 Feb 2026 13:00:05 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3b74::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:af:a3:72:4c:74:8d:8b:2c:ac:fa:ae:e0:13:36:08:0c:de:b5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:00:05 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ba72a1ef52e49754d9126f7aa9ce9f318c90d6f3d87cd37cd0b447370242d4b0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:cf:35:02:62:ae:80:4a:9c:57:7d:ca:95:
                    4b:8e:26:b6:0a:15:78:06:67:fe:21:ff:70:02:3b:
                    8f:f2:f0:f8:85:a3:6f:8c:bd:51:71:74:d3:6a:48:
                    b9:2a:42:1e:c1:65:72:e5:45:a0:c0:87:34:d0:36:
                    fe:19:89:96:c8:be:0d:c4:f2:9b:11:7b:4d:91:96:
                    2a:2e:4d:e9:3a:a5:7d:b6:8d:bc:9e:71:a0:2a:14:
                    7a:08:0e:ac:08:08:99:f7:d9:70:91:e0:c1:cb:69:
                    b6:80:19:d5:80:cd:b3:f0:ce:b1:d3:9b:32:9e:93:
                    5e:c2:50:56:85:10:cd:24:4d:fb:26:d0:48:90:59:
                    73:0c:ac:14:69:95:05:7c:69:68:e5:3f:48:63:50:
                    e3:4e:d0:74:6e:42:c0:93:d3:68:23:49:6a:13:b8:
                    99:18:05:72:f9:cf:17:47:59:0d:bd:bb:82:24:a5:
                    70:4f:1d:87:e5:86:30:10:cc:52:25:ae:90:1b:21:
                    00:bd:a7:58:7b:ed:f8:bd:31:ca:4a:a3:71:76:c3:
                    f4:e2:34:74:a1:92:7b:f5:61:7a:66:de:fc:77:4b:
                    f3:6b:9e:73:6f:f3:73:10:f2:93:6c:29:8e:b6:36:
                    ca:0f:78:66:c8:2a:f2:2f:51:0a:ab:3a:15:74:dc:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:93:FC:80:10:4D:C9:B7:27:C1:8D:0A:27:27:64:1A:46:87:89
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dfe4c092-1316-4cb9-b4c7-1733c2e8ae11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3b74::/46

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:8a:fd:29:96:2a:bf:d1:f5:d8:f7:db:c4:2f:6e:4d:c1:
         8d:c8:29:8e:68:3b:49:84:8e:e6:f5:c6:d8:d4:3a:5d:59:bb:
         f2:7b:a0:a4:fd:5a:4b:a5:10:10:a8:4b:d6:cd:c8:59:e1:70:
         c1:05:7a:28:2d:e2:38:a3:08:0e:ac:90:a6:08:5f:24:76:81:
         90:80:b1:d6:84:c5:b0:ab:a5:e5:06:80:82:7e:81:ff:14:75:
         6e:82:6d:fa:b7:56:b9:8e:5a:23:01:ae:78:fb:d3:41:06:a6:
         89:b5:80:f8:f7:9e:91:20:47:2e:05:e5:63:39:ad:24:82:6d:
         a5:61:2e:ab:4d:0b:84:3f:8f:ad:f3:e6:a0:74:2a:5d:ef:37:
         29:af:d9:29:75:62:ed:ee:97:96:be:7d:51:43:9d:29:ea:b2:
         ea:76:71:6a:a3:23:77:57:67:2d:57:93:ee:56:0e:30:42:06:
         2d:ee:2a:fb:7e:75:69:92:91:69:b2:1c:59:ad:31:14:23:7f:
         8f:50:af:12:e0:15:36:3d:3c:8c:3f:40:d2:13:10:76:1f:5f:
         73:d5:40:8f:b9:59:a8:1b:65:7c:4f:5d:ed:a3:3a:5b:4b:a3:
         4b:30:9d:6a:e5:5f:68:e5:70:d5:63:f9:1e:0c:41:80:92:f4:
         af:31:5a:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:37 2026 by rpki-client